Merge pull request #63 from webful-ltd/2024-04-actions-config

Try new CodeQL config

.github/workflows/codeql-analysis.yml

@@ -1,3 +1,5 @@
+# Does security scanning of the raw TS and of compiled Java. No Swift support
+# except on macOS runners.
 name: "CodeQL"
 
 on:
@@ -15,8 +17,19 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
+    - name: Setup Java JDK
+      uses: actions/setup-java@v2
+      with:
+        java-version: '17'
+        distribution: 'adopt'
+
+    - name: Setup Node
+      uses: actions/setup-node@v4
+      with:
+        node-version: '20'
+
     - name: Checkout repository
-      uses: actions/checkout@v2
+      uses: actions/checkout@v4
       with:
         # We must fetch at least the immediate parents so that if this is
         # a pull request then we can checkout the head.
@@ -27,17 +40,29 @@ jobs:
     - run: git checkout HEAD^2
       if: ${{ github.event_name == 'pull_request' }}
 
+    - name: Globally install Ionic and Capacitor
+      run: npm install -g @ionic/cli @capacitor/cli
+
+    - name: Install dependencies
+      run: npm install
+
+    - name: Ionic build android
+      run: ionic cap build android
+
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v2
-      # Override language selection by uncommenting this and choosing your languages
-      # with:
-      #   languages: go, javascript, csharp, python, cpp, java
+      uses: github/codeql-action/init@v3
+      with:
+        languages: javascript, java # includes TS
+        java-version: 17
 
     # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
     # If this step fails, then you should remove it and run the build manually (see below)
     - name: Autobuild
-      uses: github/codeql-action/autobuild@v2
+      uses: github/codeql-action/autobuild@v3
+      with:
+        languages: javascript, java # includes TS
+        java-version: 17
 
     # ℹ️ Command-line programs to run using the OS shell.
     # 📚 https://git.io/JvXDl
@@ -51,4 +76,7 @@ jobs:
     #   make release
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v2
+      uses: github/codeql-action/analyze@v3
+      with:
+        languages: javascript, java # includes TS
+        java-version: 17